Updated 13 October 2026

Cookies and browser storage

Cookies are small values stored in your browser. Local storage and similar technologies can also store or read information on your device. This page separates our own sign-in cookies from optional third-party services.

Our current cookies

__Host-pdx_session

Keeps you signed in. Member sessions can last up to 30 days and renew while used; admin sessions have a 12-hour limit. This cookie is Secure and HttpOnly with SameSite=Lax.

pdx_flash

Shows a short confirmation or error after an action. It expires after one minute and is read and cleared on the next relevant page.

__Host-pdx_oauth

Ties a Google or Discord sign-in attempt to your browser when you choose it. It lasts up to ten minutes and is cleared as the sign-in completes.

__Host-pdx_device

Recognises an administrator's device for security alerts. Admin-only, up to 400 days. It does not by itself keep an administrator signed in.

These support requested account functions or security. Development test servers use equivalent names without the secure host prefix. Clearing the session cookie logs you out. Browser controls can delete cookies, but blocking necessary cookies prevents login.

MoonPay checkout

MoonPay's embedded checkout loads automatically when you open your order's payment page after choosing to continue to payment. Loading it sends connection and device information to MoonPay and relevant payment partners. The notice beneath checkout links to the relevant privacy information. You can also use MoonPay's hosted page for the same order. Wallet or card choices may introduce further providers.

MoonPay may store its own cookies or similar data once its checkout opens. Its own notices explain what it stores and why, and where it offers choices, you can use them. Opening the checkout is not consent to advertising or analytics.

Paddle card checkout

Paddle's card form loads on the payment page of a card order, after you choose to pay by card, and on our payment link page that Paddle's own emails can point to. Loading it sends connection and device information to Paddle and its payment partners, and Paddle may store its own cookies or similar data to run the checkout and prevent fraud. Its notices explain what it stores. Opening the card form is not consent to advertising or analytics.

Turnstile and social sign-in

Where enabled, Cloudflare Turnstile runs on email-login forms to prevent automated abuse. Its behaviour can depend on the widget configuration; we do not assume that a particular Cloudflare clearance cookie is always set. Google and Discord sign-in open only when selected, and those providers may use their own cookies under their notices.

Optional tracking and your choice

We use no advertising or analytics cookies, so there is no cookie banner. If we ever add optional tracking, we will ask you first.

For questions or to exercise data rights, see our privacy notice or email hello@getparadoxai.com.